Product · Secure Edge
Stop attacks at the ingress, before origin
DDoS scrubbing, Next-Gen WAF, bot protection, TLS and access control run at the edge ingress. Three modes — observe, intercept, intercept + ban — let you start with logs and move to hard blocking. Origin stays hidden.- L3-L7 DDoS scrubbing
- Next-Gen WAF
- Observe / Intercept / Ban
- Bot protection
Secure Edge
Security policy runs at the edge ingress
DDoS protection
L3/L4 volumetric and protocol attacks plus L7 application attacks are scrubbed at the edge. Attack traffic is not billed.
Next-Gen WAF
OWASP Top 10 ruleset with paranoia level 1-4. Three modes: observe (log only), intercept (block malicious requests), intercept + ban (block and ban the source IP). Hits are logged.
TLS and HTTPS
Free SSL certificates, TLS 1.3 + 0-RTT, forced HTTPS, TLS version control and origin validation.
Bot protection
Behavior-based detection for scraping, credential stuffing and batch scripts, focused on login, payment and API endpoints.
Secure Token
Signed tokens control media and resource access, blocking hotlinking and unauthorized distribution.
Access control
IP and region allow/deny lists, ACLs, CORS and rate limits to control who reaches which path.
Why it matters
Traditional CDN security vs IXCDN Secure Edge
Traditional CDN
Security is often an add-on with rules spread across tools, so bad traffic is found only near origin.
IXCDN
DDoS, WAF, TLS, tokens and access control run at one edge ingress. Move from observe to intercept and ban as needed; origin stays hidden.
IXCDN